From af95777e04af7f73e565a7a47e37d95c2f7de031 Mon Sep 17 00:00:00 2001
From: Russell King <rmk+kernel@armlinux.org.uk>
Date: Sun, 5 Jun 2016 14:43:34 +0100
Subject: Accept expired server certificates

Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk>
---
 src/s_serv.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/s_serv.c b/src/s_serv.c
index 66919bb..88a9990 100644
--- a/src/s_serv.c
+++ b/src/s_serv.c
@@ -898,7 +898,8 @@ ssl_server_handshake(fde_t *fd, struct Client *client_p)
 
     if (res == X509_V_OK || res == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN ||
         res == X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE ||
-        res == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT)
+        res == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT ||
+        res == X509_V_ERR_CERT_HAS_EXPIRED)
     {
       unsigned int i = 0, n = 0;
 
-- 
cgit